According to CoinMeta, malicious Claude code extensions have appeared in the market for Cursor AI programming tools, affecting up to 5,000 users. Cursor stated that this malicious version was not developed by its parent company, Anthropic. Users who have enabled automatic updates may have downloaded this malicious extension. Cursor has removed the software package and shut down the attacker's servers. On October 30th, Anthropic released version 2.1.314 for the Open VSX and Microsoft VS Code markets; users should update their software promptly. Affected users also need to follow Cursor's cleanup instructions and change their credentials, as simply uninstalling the software may not completely remove the malicious code.